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DETAILED ACTION 

1. This action is in response to the original filing of December 22, 2003. Claims 1-38 are 
pending and have been considered below. 

Drawings 

2. The informal drawings are not of sufficient quality to permit examination. Accordingly, 
replacement drawing sheets in compliance with 37 CFR 1 .121(d) are required in reply to this 
Office action. The replacement sheet(s) should be labeled "Replacement Sheet" in the page 
header (as per 37 CFR 1.84(c)) so as not to obstruct any portion of the drawing figures. If the 
changes are not accepted by the examiner, the applicant will be notified and informed of any 
required corrective action in the next Office action. 

Applicant is given a TWO MONTH time period to submit new drawings in compliance 
with 37 CFR 1.81. Extensions of time may be obtained under the provisions of 37 CFR 1.136(a). 
Failure to timely submit replacement drawing sheets will result in ABANDONMENT of the 
application. 

3. New corrected drawings in compliance with 37 CFR 1.121(d) are required in this 
application because the drawings are hand drawn. Applicant is advised to employ the services of 
a competent patent draftsperson outside the Office, as the U.S. Patent and Trademark Office no 
longer prepares new drawings. The corrected drawings are required in reply to the Office action 
to avoid abandonment of the application. The requirement for corrected drawings will not be 
held in abeyance. 
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Specification 

4. Applicant is reminded of the proper language and format for an abstract of the disclosure. 

The abstract should be in narrative form and generally limited to a single paragraph on a 
separate sheet within the range of 50 to 150 words. It is important that the abstract not exceed 
150 words in length since the space provided for the abstract on the computer tape used by the 
printer is limited. The form and legal phraseology often used in patent claims, such as "means" 
and "said," should be avoided. The abstract should describe the disclosure sufficiently to assist 
readers in deciding whether there is a need for consulting the full patent text for details. 

The language should be clear and concise and should not repeat information given in the 
title. It should avoid using phrases which can be implied, such as, "The disclosure concerns," 
"The disclosure defined by this invention," "The disclosure describes," etc. 

5. The abstract of the disclosure is objected to because it contains more than 1 50 words. 
Correction is required. See MPEP § 608.01(b). 

6. The disclosure is objected to because of the following informalities: the examiner notes 
spelling errors and the use of the acronyms (ie. RSA, etc.) throughout the specification without 
first including a description in plain text, as required. 

Appropriate correction is required. 



Claim Objections 

7. Claim 21 is objected to because of the following informalities: it appears that claim 21 is 
a dependent claim of claim 20, however no dependency has been specified in the preamble. The 
examiner will note this when considering the claim below. 
Appropriate correction is required. 



Claim Rejections - 35 USC § 101 
8. 35 U.S.C. 101 reads as follows: 
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Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

Claims 20-38 are rejected under 35 U.S.C. 101 because the claimed invention is directed to non- 
statutory subject matter. These claims are drawn to a computer program per se. A computer 
program is not a series of steps or acts and this is not a process. A computer program is not a 
physical article or object and as such is not a machine or manufacture. A computer program is 
not a combination of substances and there for is not a compilation of matter. Thus, a computer 
program by itself does not fall within any of the four categories of invention. Therefore, claims 
20-38 are not statutory. 

jClaim Rejections - 35 USC §102 

9. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless -(e) the invention was described in (1) an application for patent, 
published under section 122(b), by another filed in the United States before the invention by the applicant for 
patent or (2) a patent granted on an application for patent by another filed in the United States before the 
invention by the applicant for patent, except that an international application filed under the treaty defined in 
section 351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) of such 
treaty in the English language. 

10. Claims 1, 2, 6, 10, 20, 21, 25 and 29 are rejected under 35 U.S.C. 102(e) as being 
anticipated by RoseetaL (2004/0039908). 

Claims J and 20: Rose et al. discloses a method and software application for digital signature of 
an electronic file comprising the steps of: 

a. determimng(computing) a portion of the electronic fi\e(block) that is to used for 
computing a digital sigpatwe(encrypt) [page 7, paragraph 0094-0095]; 
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b. digitally signing(encrypting) a block of data that consists of the determinedfcomputed) 
portion and creating the digital signature of the electronic {^(encrypted data) [page 7, paragraph 
0094-0095]; 

c. wherein the portion of the electronic file that is to be used for the digital signature is 
computed using one or more functions that are known to a signer of the electronic file who 
executes the digital signature [page 7, paragraph 0094-0095]. 

Claims 2 and 21: Rose et al. discloses a method and software application as in claims 1 and 20 
above and further discloses: 

a. computing a Message Digest (MD) value using the determined portion of the 
electronic file [page 3, paragraph 0036]; 
,v b. wherein the block of data that is digitally signed in consists of the MD value [page 3, 
paragraph 0036]. 

Claims 6 and 25: Rose et al. discloses a method and application software as in claims 2 and 21 
above and further discloses appending the digital signature to the electronic file and creating a 
digitally signed electronic f\le(the MAC tag is then appended to the message) [page 6, paragraph 
0076]. 

Claims 10 and 29: Rose et al. discloses a method and software application for digital signature 
verification of an electronic file comprising the steps of: 

a. extracting the digital signature from the electronic file and determining a portion of the 
electronic file that was used for computing the digital signature(ge«erate intermediate ciphertext 
blocks from the received transmission blocks) [page 7, paragraph 0100-0101]; 
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b. decrypting the digital signature using a public key of the signer of the electronic file, 
and obtaining a block of data and comparing the portion of the electronic file that was used for 
computing the digital signature with the block of data for determining an authenticity and an 
integrity of the electronic f\\z(performs verification of digital signature using public key) [page 3, 
paragraph 0035 and page 7, paragraph 0103]; 

e. wherein the portion of the electronic file that was used for computing the digital signature is 
computed using one or more functions that are known to a verifier of the digital signature 
verification of the electronic file [page 7, paragraphs 0094-0095]. 

Claim Rejections - 35 USC § W3 

1 1 . The following is a quotation of 35 U.S.C. 103(a) which form's the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

12. Claims 3-5, 12-14, 22-24 and 31-33 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Rose et al. (2004/0039908) in view of Okano (6,839,844). 

Claims 3 and 22: Rose et al. discloses a method and software application as in claims 2 and 21 
above and further discloses dividing the electronic fi\e(message) into a plurality of 
blocksfmessage blocks) [page 5, paragraph 0070], but does not explicitly disclose that: 

a. from each block of the plurality of blocks, extracting a block portion and copying the 
block portion into a buffer; 
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b. wherein when the block portion is extracted and copied into the buffer for each block 
of the plurality of blocks, the buffer comprises the portion of the electronic file that is to be 
digitally signed. 

However, Okano discloses a similar method and software application and further discloses: 

a. from each block of the plurality of blocks, extracting a block portion and copying the 
block portion into a bufferfsave the selected portion in a separate file) [column 3, lines 33-37]; 

b. wherein when the block portion is extracted and copied into the buffer for each block 
of the plurality of blocks, the buffer comprises the portion of the electronic file that is to be 
digitally sigaedfencrypt file) [column 3, lines 33-37]. 

Therefore, it would have been obvious to one of ordinary skill in the art at the time of invention 
to copy the block portion disclosed by Rose et al. into a buffer before digitally signing the 
blocks. One would have been motivated to do so in order to increase system performance by 
using a separate module to perform the encryption process. 

Claims 4 and 23: Rose et al. and Okano disclose a method and software application as in claims 

3 and 22 above and Rose et al. further discloses that for each block of the plurality of blocks, 
computing a value m using the one or more functions and within a block of the plurality of 
blocksfcalculate value Eu(rH) which is used to encrypt only the bits that are transmitted in 
encrypted form), at a location m bytes apart from a beginning of the block, extracting the block 
portion and copying the block portion into the buffer, wherein the block portion has p bytes of 
length [page 7, paragraphs 0094-0095]. 

Claims 5 and 24: Rose et al. and Okano disclose a method and software application as in claims 

4 and 23 above and Rose et al. further discloses that for computing the value of m, a first 
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fimctionfcompute E k j(rH)) is applied on a shared secret keyfkl) of the signer of the electronic 
file, and wherein a second function is applied on a result of the first function and on a variable j 
that represents the number of a current block from the plurality of blocks of the electronic 
file(the bit-wise AND function applied to: Mi AND E kJ (r+i)) [page 7, paragraphs 0094-0095]. 
Claims 12 and 31: Rose et aL discloses a method and software application as in claims 1 1 and 
30 abovt and further discloses dividing the electronic ^(message) into a plurality of 
b\oc\as>(message blocks) [page 5, paragraph 0070], but does not explicitly disclose that: 

a. from each block of the plurality of blocks, extracting a block portion and copying the 
block portion into a buffer; 

b. wherein when the block portion is extracted and copied into the buffer for each block 
of the plurality of blocks, the buffer comprises the pdrtion of the electronic file'that was used for 
computing the digital signature. 

However, Okano discloses a similar method and software application and further discloses: 

a. from each block of the plurality of blocks, extracting a block portion and copying the 
block portion into a buffer wherein when the block portion is extracted and copied into the buffer 
for each block of the plurality of blocks, the buffer comprises the portion of the electronic file 
that was used for computing the digital signaturefextracting the encrypted portions to a 
decryptor for decrypting) [column 3, lines 38-42]. 

Therefore, it would have been obvious to one of ordinary skill in the art at the time of invention 
to copy the block portion disclosed by Rose et al. into a buffer before decrypting the blocks. One 
would have been motivated to do so in order to increase system performance by using a separate 
module to perform the decryption process. 
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Claims 13 and 32: Rose et al. and Okano disclose a method and software application as in 
claims 12 and 31 above and Rose et al. further discloses that for each block of the plurality of 
blocks, computing a value m using the one or more functions and within a block of the plurality 
of b\ocks(calculate value Eki(r+i) which is used to generate the intermediate cipherblocks for 
decrypting), at a location m bytes apart from a beginning of the block, extracting the block 
portion and copying the block portion into the buffer, wherein the block portion has p bytes of 
length [page 7, paragraphs 0094, 0095 and 0100], 

Claims 14 and 33: Rose et ah and Okano disclose a method and software application as in 
claims 13 and 32 above and Rose et aL further discloses that for computing the value of m, a first 
fyxnoX\on(compute Ekj(r+i)) is applied on a shared secret key(kl) of the signer of the electronic 
file, and wherein £ second function is applied on a result of the first function and on a variable j 
that represents the number of a current block from the plurality of blocks of the electronic 
fi\e(the bit-wise AND function applied to: Mi AND Eu(r+i)) [page 7, paragraphs 0094-0095]. 
13. Claims 7-9, 11,15-19, 26-28, 30 and 34-38 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Rose et al. (2004/0039908). 

Claims 7-9, 26, 27 and 28: Rose et al. discloses a method and software application as in claims 
2 and 21 above, but does not explicitly disclose that the electronic file is a binary, executable and 
shared library file. However, it would have been obvious to one of ordinary skill in the art at the 
time of invention that the electronic file can be a binary file, executable file, shared library file or 
any other form of electronic data. One would have been motivated to do so in order to make the 
system more versatile by being able to accommodate all types of data format. 
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Claims 11 and 30: Rose et al. discloses a method and software application as in claims 10 and 
29 above and further discloses using a message digest to compute the digital signature [page 3, 
paragraph 0036], but does not explicitly disclose: 

a. computing a Message Digest (MD2) value using the determined portion of the 
electronic file; 

b. wherein the said block of data obtained comprises an MD1 value [page 3, paragraph 

0036]; 

c. comparing the MD1 value with the MD2 value. 

However, it would have been obvious to one of ordinary skill in the art at the time of invention 
that the block of data obtained after decrypting the signature, which is a digital signature of a 
message digest, will be a message digest. One would be motivated to perform the 
encryption/decryption scheme in this manner in order to retain a conventional asymmetric 
authentication system, which will insure more predictable results. Furthermore, it would have 
been obvious to one of ordinary skill in the art at the time of invention to compute the Message 
Digest MD2 and compare it to MD1 . One would have been motivated to do so in order to verify 
that the data has not been compromised during transmittal. 

Claims 15-17, 34, 35 and 36: Rose et al. discloses a method and software application as in 
claims 1 1 and 30 above, but does not explicitly disclose that the electronic file is a binary, 
executable and shared library file. However, it would have been obvious to one of ordinary skill 
in the art at the time of invention that the electronic file can be a binary file, executable file, 
shared library file or any other form of electronic data. One would have been motivated to do so 
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in order to make the system more versatile by being able to accommodate all types of data 
format. 

Claims 18 and 37: Rose et al. discloses a method and software application as in claims 1 1 and 
30 above, but does not explicitly disclose that if the MD1 value is equal to the MD2 value, it is 
concluded that the digital signature is valid and the electronic file is authentic and unmodified 
with respect to the electronic file that was digitally signed. However, it would have been 
obvious to one of ordinary skill in the art at the time of invention that if MD1 and MD2 match, 
one can conclude that the digital signature is valid and the electronic file is authentic. One would 
be motivated to perform the encryption/decryption scheme in this manner in order to retain a 
conventional asymmetric authentication system, which will insure more predictable results. 
Claims 19 and 38: Rose et al. discloses a method and software application as in claims 1 1 and 
30 above, but does not explicitly disclose that if MD1 value is not equal to MD2 value, it is 
concluded that the digital signature is invalid and that the electronic file is corrupted. However, 
it would have been obvious to one of ordinary skill in the art at the time of invention that if MD1 
and MD2 do not match, one can conclude that the digital signature is invalid and the electronic 
file is corrupted. One would be motivated to perform the encryption/decryption scheme in this 
manner in order to retain a conventional asymmetric authentication system, which will insure 
more predictable results. 



Conclusion 

14. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. Roberts (5,008,935) and Hawkes et al. (2004/0019782). 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Edward Zee whose telephone number is (571) 270-1686. The 
examiner can normally be reached on Monday through Thursday 6:30AM-5 :00PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James W. Myhre can be reached on (571) 270-1065. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



EZ J<p*r€sW. Myhre 

March 28, 2007 ^Supervisory Patent Examiner 
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